How can iframe injection be used?

Question

Information Security

I found an iframe injection in a pretty serious site with a lot of users. I can only insert an iframe element of a certain size with any link. What can be done?

Answer 1

Nothing if the site does not have a clearly described bugbounty program. Otherwise, even the most harmless action can lead to very unpleasant consequences, especially if this is a site of your country - they will blame everything on you and also provide logs.

Answer 2

Read the legislation.

Answer 3

If the site does not participate in bugbounty, then it's better not to promote it ... Otherwise, it's worth reading about "iframe injection" and XSS.